HackNotes Windows Security Portable Reference [Kindle Edition]

The good:
I'm about halfway through it and there is plenty of great information in it. If you have a good working knowledge of IP networks and (to a lesser degree) associated protocols like DNS, SMTP, HTTP, etc... This will serve as a great reference. It's also good for newer types who want to learn from a very concise author. It approaches a lot of topics from an attack-defend perspective, demonstrating what you would want to accomplish as a hacker vs. what you would want to accomplish as a security conscious sysadmin.

The bad:
It reads like it was published by a combination of Foundstone's marketing department, the author's personal marketing department, and the technical auditor's personal marketing department. Basically every suggestion they have for a tool will benefit one of them with only minor mentions of some of the industry leading applications. I can't really blame them, but I wouldn't suggest taking their tool suggestions directly to heart without doing a little digging on your own.

In this concise and relevant reference book, he offers a refreshing change from the expected tradition of overwhelming the reader with unabridged bibles, if you will, which seem to remain for the most part unread expect for the occasional glance. In just a mere 6" x 1/2" x 9" worth of material (which certainly reads as if its equivalent weight of knowledge is twice that), this is an enjoyable read from cover to cover. Also, in its well organized format with its visual cues and hierarchical headers, it is effortless to quickly find and access any information as you would require from a "portable reference". One of my favorite features is the 32 pages of the <Reference Center> which, as if it was possible, a quick reference for the already concise 230+ page book. For example, listed again are the "Quick Command Lines" and "Command Reference" for the choice of built-in and easily obtainable (and often free) utilities Michael uses to demonstrate his concepts and techniques. Furthermore, he makes an effort to litter the book with treasures of facts which appeal to the trivia buffs such as the explanation about the validity of port 0 during his discussion about port scanning.

BOTTOM-LINE: Do not be dissuaded from the size of this book; what it "lacks" in physical girth is certainly made up for in content with its much appreciated relevancy with discussions about current and significant security concerns.